Auditbox - Audit Record Repository
A FHIR-native Audit Record Repository to consolidate healthcare audit logs from multiple sources and answer compliance or security questions in seconds — not weeks.
What's in the box?
Centralize FHIR AuditEvent from your services in one standards-based repository — a single source of truth with consistent schema and lifecycle policies.
Integrate via standard FHIR APIs and AuditEvent resources to reduce mapping and boilerplate.
Capture who, what, when, where, and how for every access or change — aligned with ASTM E2147, HIPAA, and GDPR.
Optimize storage costs while retaining full compliance so that long-term regulatory retention doesn't overload expensive SIEM or database resources.
Quickly trace user activity with a standardized API and intuitive UI so you can perform audits, reviews, and root-cause analysis without sifting through raw system logs.
Architecture
Standards-based FHIR Audit Event as the data model foundation
{
"resourceType": "AuditEvent",
"meta": {
"profile": [
"https://profiles.ihe.net/ITI/BALP/StructureDefinition/
IHE.BasicAudit.PatientDelete"
]
},
"type": {
"system": "http://terminology.hl7.org/CodeSystem/audit-event-type",
"code": "rest",
"display": "Restful Operation"
},
"subtype": [{
"system": "http://hl7.org/fhir/restful-interaction",
"code": "delete",
"display": "Delete"
}],
"action": "D",
"recorded": "2025-09-10T12:00:00Z",
"outcome": "0",
"agent": [{
"type": {
"coding": [{
"system": "http://dicom.nema.org/resources/ontology/DCM",
"code": "110150",
"display": "Application"
}]
},
"requestor": true,
"who": { "reference": "Device/app-server-01" }
}],
"source": {
"observer": { "reference": "Device/audit-source" },
"type": [{ "code": "4" }]
},
"entity": [{
"what": { "reference": "Patient/example" },
"type": { "code": "1" },
"role": { "code": "1" }
}]
}
Agents (Actors and Roles)
Identifies every person, system, or device involved, including their roles (e.g., clinician, system, device).
Source (Site & Observer)
The system or component that detected and reported the event.
Location
Actual place of the event (e.g., clinic room, device location).
Type & Action
What happened (e.g., record accessed, updated, deleted).
Entities (Objects & Details)
Which data or resources were affected, with rich context and security labels.
Time & Outcome
When it happened and whether it succeeded or failed.
Authorization
Capture the specific reason each actor (person, system, or device) participated in it.
Designed for Healthcare Security & Audit Needs
Auditbox adapts to your security and compliance workflows across the full healthcare audit lifecycle.
Automatically ingest FHIR‑native logs from your FHIR services to eliminate fragmented audit trails.
- Address
- Health Samurai Inc. 1891 N Gaffey St Ste O, San Pedro, CA 90731
- Telephone
- +1 (818) 731-1279
